#cwe-862

共收录 4122 条相关情报。

← 返回所有主题

漏洞预警2026-09-04 发布INFO

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipula...

CVE-2026-85512

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-862 #cwe-863

漏洞预警2026-09-04 发布INFO

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JetPopup: from n/a throug...

CVE-2026-27347

Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Secur

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to inst...

CVE-2026-82923

The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its RE

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was authorized to use the referenced Sharing Group. In ...

CVE-2026-85533

An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MarketKing: from n/a...

CVE-2026-85311

Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WCFM Membership: fr...

CVE-2026-32480

Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-09-04 发布INFO

MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter

CVE-2026-85533

An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-862

漏洞预警2026-09-04 发布INFO

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified befor...

CVE-2026-84066

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify th

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-04 发布INFO

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients a...

CVE-2026-79632

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in sub

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-09-04 发布INFO

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS...

CVE-2026-67398

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8,

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

安全公告2026-09-04 发布INFO

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages,...

CVE-2026-85433

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to rec

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:critical

安全公告2026-09-04 发布INFO

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges...

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-862 #severity:high

漏洞预警2026-09-04 发布INFO

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8, from 9.0.0 before 9.0.8, all other EOL versions from 4.5...

CVE-2026-67398

Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8,

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-03 发布INFO

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attacke...

CVE-2026-85433

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to rec

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-03 发布INFO

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

安全公告2026-09-03 发布INFO

SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)

CVE-2026-72800

**CVE:** This vulnerability corresponds to [CVE-2026-72800](https://nvd.nist.gov/vuln/detail/CVE-2026-72800). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium

安全公告2026-09-03 发布INFO

SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents

CVE-2026-72803

**CVE:** This vulnerability corresponds to [CVE-2026-72803](https://nvd.nist.gov/vuln/detail/CVE-2026-72803). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium

安全公告2026-09-03 发布INFO

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

CVE-2026-72804

**CVE:** This vulnerability corresponds to [CVE-2026-72804](https://nvd.nist.gov/vuln/detail/CVE-2026-72804). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-862 #severity:high

安全公告2026-09-03 发布INFO

SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents

CVE-2026-72805

**CVE:** This vulnerability corresponds to [CVE-2026-72805](https://nvd.nist.gov/vuln/detail/CVE-2026-72805). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium

安全公告2026-09-03 发布INFO

SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)

CVE-2026-72806

**CVE:** This vulnerability corresponds to [CVE-2026-72806](https://nvd.nist.gov/vuln/detail/CVE-2026-72806). ### Summa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-862 #severity:medium